WO2023115850A1

WO2023115850A1 - Consortium blockchain consensus identity authentication method

Info

Publication number: WO2023115850A1
Application number: PCT/CN2022/099577
Authority: WO
Inventors: 管桂林; 谢真强; 程序; 田懿; 曹扬; 李响; 韩国权; 黄海峰
Original assignee: 中电科大数据研究院有限公司
Priority date: 2021-12-23
Filing date: 2022-06-17
Publication date: 2023-06-29
Also published as: CN114499952B; CN114499952A

Abstract

The present invention provides a consortium blockchain consensus identity authentication method. A user joins a consortium blockchain by means of an access mechanism of the consortium blockchain to become a consortium member. A supervision node operates an initialization algorithm to generate a public parameter PK, generates digital identity information according to unique identifier information of the consortium member, uploads the public parameter PK and the digital identity information to the blockchain, and then generates a corresponding identity private key for the consortium member of each node by means of a key generation algorithm. The beneficial effects of the present invention are that: a data transmission process can be ensured not to be tampered, and identity information of the signer can be identified; the present invention is applied to public data resource development and utilization scenarios; and the combination with an identity signature-based technology not only realizes efficient and safe access control but also expands use scenarios of a consortium blockchain, thereby solving the problem of quickly and safely achieving identity authentication between consensus nodes in the context of a consortium blockchain.

Description

A Consortium Chain Consensus Identity Authentication Method

technical field

The invention relates to a consortium chain consensus identity authentication method, which belongs to the technical field of block chains, and specifically relates to a consortium chain consensus authentication method applicable to the development and utilization of public data resources.

Background technique

Carrying out the development and utilization of public data resources can not only promote the development of the urban digital economy and protect the people's livelihood, but also play an important role in improving government management concepts and realizing the modernization of government governance capabilities. However, in the process of promoting the market-based value-added development of public data, there are problems such as low data resource sharing efficiency, difficulty in ensuring personal data privacy, and difficulty in monitoring the data use process. At the same time, it is improving the support of data resources in the fields of economic development and social governance. The decision-making ability is weak, and it is difficult to support the full release of the value of public data to the social side.

The blockchain realizes on-chain certificate storage, anti-counterfeiting traceability, data supervision and other services, and can be divided into public chains, alliance chains and private chains. The alliance chain is jointly maintained by institutional members, providing member management, authentication, authorization, monitoring, and auditing and other functions, its openness is generally between the public chain and the private chain. Usually, multiple organizations jointly manage a blockchain. Nodes wanting to join the alliance chain must be approved by the organization. The data on the chain is only the nodes in the alliance chain. have the right to read and write. Because the alliance chain has the advantages of faster speed, lower cost, partial decentralization, strong controllability, and data will not be disclosed by default, it is widely used in government agencies, finance, manufacturing, logistics, medical care, insurance and other application scenarios Provide full-process data traceability, on-chain storage, and trusted data sharing services.

However, most of the existing consensus authentication mechanisms among members of the alliance chain use the public key signature algorithm based on the PKI system. As the alliance nodes become larger and larger, it will cause the problem that CA needs to maintain a large number of public key certificates. As a public key cryptography technology, identity-based cryptography has changed the traditional way of generating public keys, and uses information that uniquely identifies users, such as ID numbers, emails, phone numbers, etc., as public keys, without the need to apply for public key numbers from CA Certificates effectively avoid the problems of certificate generation, verification, storage and revocation in traditional public key cryptosystems, and reduce users' dependence on public key certificates.

To sum up, based on the identity encryption system, how to design an alliance chain consensus security identity authentication method in the development and utilization of public data resources to ensure that the communication between alliance consensus nodes can be efficiently accessed under the support of the underlying network of the blockchain Control is becoming a burning problem.

technical problem

In order to solve the above technical problems, the present invention provides a consortium chain consensus identity authentication method, the consortium chain consensus identity authentication method.

technical solution

The present invention is achieved through the following technical solutions.

A consortium chain consensus identity authentication method provided by the present invention comprises the following steps:

①A user joins through the access mechanism of the alliance chain and becomes an alliance member. The supervisory node runs the initialization algorithm to generate the public parameter PK, and at the same time generates digital identity information according to the unique identity information of the alliance member, and uploads the public parameter PK and digital identity information to the blockchain, and then generate the corresponding identity private key for each node's alliance members through the key generation algorithm;

②The leader node packs and verifies a batch of transactions to form a block, signs the block with its own private key, and sends it to the follower node;

③ After the follower node receives the signature, it verifies the signature through the digital identity public key of the leader node. If it passes the verification, it verifies the transaction data in the block, and uses its own private key to vote and sign and broadcast it to the follower node. Each child follower node; if the verification is not passed, the verification fails and returns to step ②;

④ After receiving the voting signature, other sub-entry nodes use their respective public keys for verification, and store the block according to the voting results.

The identity signature includes an initialization module, a key generation module, a signature module and a signature verification module.

The initialization module process includes the following steps:

①The public parameter PK required for data transmission is generated by the supervisory node in the alliance chain, and the public parameter PK is uploaded to the blockchain;

②Randomly select two groups G1 and G2 whose order is a prime number q, and define bilinear map e and hash functions H ₁ and H ₂ :

e: G ₁ ×G ₂ →G ₂ ,

H ₁ : {0,1} ⁿ → G ₁ ;

H ₂ :G ₁ →Z _q ;

③ Randomly select a random number s from the finite field Z _q as its private key, then randomly select g from the group G ₁ as its generator, and finally upload the public parameter PK to the blockchain;

in:

Z _q is a finite field of order q, and the public parameters PK={q, e, G ₁ ,G ₂ ,H ₁ ,H ₂ ,g }.

The key generation module process includes the following steps:

①The supervisory node obtains the public parameter PK on the chain, and then generates its own private key by running the key generation algorithm according to the identity information of each node's alliance member, inputs the user's unique identity information ID, public parameter PK, and outputs the user's private key S _ID and digital identity P _ID , upload the digital identity information (ID, P _ID ) to the blockchain, and send the private key S _ID to the user through a secure channel;

②According to the node alliance member identity information ID∈{0,1} ⁿ , calculate Q _ID =H ₁ (ID), x=H ₁ (sQ _ID ), and then calculate node private key S _ID =x+s, user public key Key P _ID =g ^x+s , send the private key S _ID to the user through a secure channel;

Among them, Q _ID is the hash value of the identity information, and x is the hash value of the supervisory node's private key s and Q _ID .

The signature module process includes the following steps:

①The signing node obtains the public parameter PK through the chain, then runs the signature algorithm, inputs the signature private key S _ID , the public parameter PK, and the information M to be signed, and outputs the signature δ;

② For the message M to be signed, calculate H ₁ (M), randomly select a random number r∈Z _q , and use the private key S _ID to calculate the first signature

, the second signature

, the output signature

, and sent to the verification node.

The signature verification module process includes the following steps:

① The verification node obtains the public parameter PK and digital identity information through the chain, runs the verification signature algorithm, inputs the signature δ, public parameter PK and digital identity information, and outputs true if the signature verification is correct, otherwise false;

②The verification node obtains the public key of the sending node and the public parameter PK from the chain, calculates H ₁ (M), and passes the verification equation

Whether it is established to determine whether the signature is correct;

The correctness verification of the verification equation is as follows:

.

Beneficial effect

The beneficial effects of the present invention are: it can ensure that the data transmission process is not tampered with, and can identify the identity information of the signer; when applied to the development and utilization of public data resources, combined with the technology based on identity signature, it not only realizes efficient security access control At the same time, it also expands the usage scenarios of the alliance chain, which can effectively solve the problem of quickly and safely realizing identity authentication between consensus nodes under the background of the alliance chain.

Description of drawings

Fig. 1 is the flowchart of identity signature of the present invention;

Fig. 2 is a flow chart of the present invention.

Embodiments of the present invention

The technical solution of the present invention is further described below, but the scope of protection is not limited to the description.

As shown in Figure 2, a consortium chain consensus identity authentication method includes the following steps:

The identity signature includes an initialization module, a key generation module, a signature module, and a signature verification module, as shown in FIG. 1 .

The initialization module process includes the following steps:

e: G ₁ ×G ₂ →G ₂ ,

H ₁ : {0,1} ⁿ → G ₁ ;

h ₂:G ₁→ Z _q ;

in:

The key generation module process includes the following steps:

②According to the node alliance member identity information ID∈{0,1} ⁿ , calculate Q _ID = H ₁ (ID), x = H ₁ (sQ _ID ), and then calculate node private key S _ID = x+s, user public key P _ID =g ^x+s , send the private key S _ID to the user through a secure channel;

Among them, Q _ID is the hash value of the identity information ID, and x is the hash value of the supervisory node's private key s and Q _ID .

The signature module process includes the following steps:

, the second signature

, the output signature

, and sent to the verification node.

The signature verification module process includes the following steps:

① The verification node obtains the public parameter PK and digital identity information through the chain, runs the verification signature algorithm, inputs the signature, public parameter PK and digital identity information, and outputs true if the signature verification is correct, otherwise false;

Whether it is established to determine whether the signature is correct;

The correctness verification of the verification equation is as follows:

.

In summary, compared with the prior art, the beneficial results of the present invention are:

1. Combining the blockchain technology and the identity-based signature system to realize the binding of user identity and public key, avoiding the problems of difficult management, high cost and low efficiency of public key certificates existing in the existing public key infrastructure system;

2. Combined with the background of the blockchain, digital identities are created, which can establish credible identities on the chain for alliance members and provide strong technical support for identity authentication;

3. Strong versatility and high security, which can effectively solve the problem of quickly and safely realizing identity authentication between consensus nodes in the context of alliance chains.

Claims

A consortium chain consensus identity authentication method, characterized in that: comprising the following steps:

①A user joins through the access mechanism of the alliance chain and becomes an alliance member. The supervisory node runs the initialization algorithm to generate the public parameter PK, and at the same time generates digital identity information according to the unique identity information of the alliance member, and uploads the public parameter PK and digital identity information to the blockchain, and then generate the corresponding identity private key for each node's alliance members through the key generation algorithm;

②The leader node packs and verifies a batch of transactions to form a block, signs the block with its own private key, and sends it to the follower node;

③ After the follower node receives the signature, it verifies the signature through the digital identity public key of the leader node. If it passes the verification, it verifies the transaction data in the block, and uses its own private key to vote and sign and broadcast it to the follower node. Each child follower node; if the verification is not passed, the verification fails and returns to step ②;

④ After receiving the voting signature, other sub-entry nodes use their respective public keys for verification, and store the block according to the voting results.

2. The alliance chain consensus identity authentication method according to claim 1, wherein the identity signature includes an initialization module, a key generation module, a signature module, and a signature verification module.

3. The alliance chain consensus identity authentication method according to claim 2, characterized in that: the initialization module process includes the following steps:

①The public parameter PK required for data transmission is generated by the supervisory node in the alliance chain, and the public parameter PK is uploaded to the blockchain;

②Randomly select two groups G1 and G2 whose order is a prime number q, and define bilinear map e and hash functions H 1 and H 2 :

e: G 1 ×G 2 →G 2 ,

H 1 : {0,1} n → G 1 ;

H 2 :G 1 →Z q ;

③ Randomly select a random number s from the finite field Z q as its private key, then randomly select g from the group G 1 as its generator, and finally upload the public parameter PK to the blockchain;

in:

Z q is a finite field of order q, and the public parameters PK={q, e, G 1 ,G 2 ,H 1 ,H 2 ,g }.

4. The alliance chain consensus identity authentication method according to claim 2, characterized in that: the key generation module process includes the following steps: the

①The supervisory node obtains the public parameter PK on the chain, and then generates its own private key by running the key generation algorithm according to the identity information of each node's alliance member, inputs the user's unique identity information ID, public parameter PK, and outputs the user's private key S ID and digital identity P ID , upload the digital identity information (ID, P ID ) to the blockchain, and send the private key S ID to the user through a secure channel;

②According to the node alliance member identity information ID∈{0,1} n , calculate Q ID = H 1 (ID), x = H 1 (sQ ID ), and then calculate node private key S ID = x+s, user public key P ID =g x+s , send the private key S ID to the user through a secure channel;

Among them, Q ID is the hash value of the identity information, and x is the hash value of the supervisory node's private key s and Q ID .

5. The alliance chain consensus identity authentication method according to claim 2, characterized in that: the signature module process includes the following steps:

①The signing node obtains the public parameter PK through the chain, then runs the signature algorithm, inputs the signature private key S ID , the public parameter PK, and the information M to be signed, and outputs the signature δ;

② For the message M to be signed, calculate H 1 (M), randomly select a random number r∈Z q , and use the private key S ID to calculate the first signature
, the second signature
, the output signature
, and sent to the verification node.

6. The alliance chain consensus identity authentication method according to claim 2, characterized in that: the signature verification module process includes the following steps:

① The verification node obtains the public parameter PK and digital identity information through the chain, runs the verification signature algorithm, inputs the signature δ, public parameter PK and digital identity information, and outputs true if the signature verification is correct, otherwise false;

②The verification node obtains the public key of the sending node and the public parameter PK from the chain, calculates H 1 (M), and passes the verification equation
Whether it is established to determine whether the signature is correct;

7. The alliance chain consensus identity authentication method according to claim 6, characterized in that: the correctness verification of the verification equation is as follows:

.